CVE-2014-5755

The CVE-2014-5755 entry applies to the Verizon (com.wverizonwirelessbill) Android app version 0.1, where SSL/TLS connections do not verify X.509 certificates. Root cause: missing validation of server certificates, enabling man-in-the-middle attackers to spoof servers and access sensitive informat...